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AMENDMENTS TO THE CLAIMS 

This Listing of Claims will replace all prior versions and listings of claims in this 
application. 

Listing of Claims: 

1. (Currently Amended) An apparatus, comprising: 

a plurality of ports to at least one of which a terminal or network having an encrypting 
capability can be directly or indirectl y conn e ct e d coupled : 

encryption/decryption means for performing an encrypting process to apply encryption- 
based security and a decrypting process to remove encryption-based security on data being 
communicated between the terminal or network having the encrypting capability and another 
network or terminal coupled to one of the plurality of ports; and 

bridge means in a data link layer for allowing data, which has been received with one of 
the plurality of ports and then on which the encrypting or decrypting process has been 
performed, to be outputted as it is from another port without processing any routing proc e ss at a 
n e twork lay e r b e ing p e rform ed IP address , the bridge means being disposed within the apparatus, 
along with the encryption/decryption means. 

2. (Previously Presented) The apparatus according to claim 1, wherein the 
encryption/decryption means is adapted to perform the encrypting process and the decrypting 
process on data, so that the apparatus receives and retransmits data in the form of encrj^ted data 
from and to the terminal or network having the encrypting capability, and the apparatus receives 
and retransmits the data in the form of non-encrypted data from and to a network or apparatus 
coupled to another port of the apparatus and having no encrypting capability. 

3. (Currently Amended) An apparatus, comprising: 

a plurality of ports to at least one of which a terminal or network can be directly or 
indirectly conn e ct e d coupled : 
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encryption/decryption means for performing an encrypting process or a decrypting 
process on data which has been received with one of the plurality of ports and then has passed 
through a physical layer and a data link layer, the encrypting process or decrypting process 
generating encrypted data or decrypted data; and 

bridge means in the data link layer for passing the encrypted data or decrypted data to the 
data link layer and the physical layer without passing said data to a network lay e r in which 
routing between networks is controlled processing any IP address , and then sending said data to 
another port so as to be outputted from said port to another terminal or network coupled to the 
other port, the bridge means being disposed within the apparatus, along with the 
encryption/decryption means. 

4. (Previously Presented) The apparatus according to claim 3, fiirther comprising setting 
information storage means for storing setting information for controlling the encrypting process 
and the decrypting process, wherein the encryption/decryption means controls the encrypting 
process and the decrypting process by comparing the setting information stored in the setting 
information storage means with header information of a data packet of data received with one of 
the plurality of ports. 

5. (Currently Amended) A method for performing an encrypting process and a decrypting 
process using an encryption/decryption apparatus, comprising: 

performing the encrypting or decrypting process on data which has been received with a 
first one of a plurality of ports of the encryption/decryption apparatus from a first network or 
terminal coupled to the first one of the plurality of ports and then has passed through a data link 
layer and a physical layer of the encryption/decryption apparatus, to thereby obtain encrypted 
data or decrypted data; and 

outputting the encrypted data or decrypted data from a second one of the plurality of 
ports of the encryption/decryption apparatus through the physical layer and bridge means in the 
data link layer of the encryption/decryption apparatus to a second network or terminal coupled to 
the second one of the plurality of ports, without passing said data to a network layer in which 
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6. (Currently Amended) A system, comprising: 
the apparatus according to claim 1 ; and 

a terminal or network having an encrypting capability which can be conn e ct e d coupled to 
the apparatus. 

7. (Currently Amended) A system, comprising: 

a terminal or network having an encrypting capability; 
a terminal or network having no encrypting capability; and 

the apparatus according to claim 2 which can be conn e ct e d coupled between the terminal 
or network having the encrypting capability and the terminal or network having no encrypting 
capability. 

8. (Previously Presented) The apparatus according to claim 2, wherein the 
encryption/decryption means is configured to perform the decrypting process on encrypted data 
and then sends said data to a terminal or network having no encrypting capability when the 
apparatus receives said encrypted data from another terminal or network having an encrypting 
capability and retransmits said data to the terminal or network having no encrypting capability, 
and is configured to perform the encrypting process on non-encrypted data and then send said 
data to a terminal or network having an encrypting capability when the apparatus receives said 
non-encrypted data from another terminal or network having no encrypting capability and 
retransmits said data to the terminal or network having the encrypting capability. 

9. (Previously Presented) The apparatus of claim 1, wherein the bridge means is an IP-Sec 
bridge and data fransmission processes are carried out in layers lower than the network layer. 

10. (Previously Presented) The apparatus of claim 3, wherein the bridge means is an IP-Sec 
bridge and data fransmission processes are carried out in layers lower than the network layer. 
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1 1 . (Previously Presented) The method of claim 5, wherein the bridge means is an IP-Sec 
bridge and data transmission processes are carried out in layers lower than the network layer. 

12. (Previously Presented) The method according to claim 5, wherein said performing the 
encrypting or decrypting process comprises: 

performing the encrypting process and the decrypting process on data so that data is 

received from or transmitted to a terminal or network having encryption capability in the form of 
encrypted data and so that data is received from or transmitted to a terminal or network without 
encryption capability in the form of non-encrypted data. 

13. (Previously Presented) The method according to claim 12, wherein said performing the 
encrypting process and the decrypting process comprises: 

performing the decrypting process on encrypted data received from a terminal or network 
having encryption capability and destined for a terminal or network not having encryption 
capability; 

performing the encrypting process on data received from a terminal or network not 
having encryption capability and destined for a terminal or network having encryption capability. 

14. (Previously Presented) The method according to claim 5, fiirther comprising controlling 
the encrypting process and the decrypting process by comparing setting information stored in the 
encryption/decryption apparatus with header information of a data packet of data received with 
one of the plurality of ports. 

15. (Previously Presented) The method according to claim 5, wherein said outputting 
comprises outputting the encrypted data if the second terminal or network has encryption 
capability and outputting the decrypted data if the second terminal or network does not have 

encryption capability. 

16. (Previously Presented) The apparatus according to claim 3, wherein the other network or 
terminal coupled to the other port has encryption capability in the case in which the encrypted 
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data is passed and does not have encryption capability in the case in which the decrypted data is 
passed. 

17. (Previously Presented) The apparatus according to claim 1, wherein the apparatus is 
configured to process data received with one of the plurality of ports without changing a network 
address of a destination associated with the data. 

18. (Previously Presented) The apparatus according to claim 3, wherein the apparatus is 
configured to process data received with one of the plurality of ports without changing a network 
address of a destination associated with the data. 

19. (Previously Presented) The method according to claim 5, wherein the data received with 
the first one of the plurality of ports is output, following the performing of the encrypting or 
decrypting process, without changing a network address of a destination associated with the data. 
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